102k Dogecoins missing from my fast-pool account

[sameev29]

102000 coins are missing from my account

A transaction has been made but I didnt do it.I wasnt even logged into fast-pool that time.I was asleep.



I had almost 102k Dogecoins in my account like 9 hours ago from now when I last saw them.Now my account is showing only 2406 coins.I didnt withdraw or anything.How did this happen?

Pool username-sameev292

Need quick help form the pool owners and other members.Any help is appreciated.

[bitlrl]

that' crazy...

[maardein]

I cant really help you with your doge, but please remember to set auto payout next time. If there is one thing I learned in the altcoin world, it is to never trust anyone with your money. No pools, no exchange no one.

[mymenace]

could this be the problem, i am not sure but it may help

WITHDRAW YOUR FUNDS FROM EVERY POOL YOU'VE MINED ON
We are receiving multiple reports of pool accounts being cleared from funds, not only Lenny, but also eToken, RonPaulCoin and other altcoins.
We are unsure which pool has been compromised, but it wasn't the official one.
DOUBLE CHECK YOUR PAYOUT ADDRESS, BECAUSE THE ATTACKER IS CHANGING IT TO HIS OWN.

Don't forget to change your username/password/PIN combination AND NEVER USE IT AGAIN.
We'll be posting updates as soon as we get any.
Some reports are suggesting happyminers pool as the origin. We can't confirm or deny this information, because we have no connection with this pool and especially, we do not own it.

Victims reported robbery from following pools:
http://lenny.happyminers.net/
https://www.suchcoins.com/
http://etoken.valid-error.com/
http://ron.n0nplusultra.net/
http://rpc.muchhash.com/
http://coye.dedicatedpool.com/
https://doge.netcodepool.org
https://doge.netcodepool.org
http://eac.poolerino.com
http://velocitycoin.miners-point.com
https://fast-pool.com/
https://lot.nut2pools.com
https://dogehouse.org
http://cat.cryptovalley.com
http://kit.cipherpool.com/
http://ndl.poolofpools.com/
https://gift.hashaddicts.net/
http://cat.coinium.org/

[Nullu]

Why do people store so many coins on pools? Why don't you auto-withdraw? storing your coins on a pool is asking for trouble.

My pool accounts are empty. I also never use the same password twice because of stuff like this.

[Nullu]

Why do people store so many coins on pools? Why don't you auto-withdraw? storing your coins on a pool is asking for trouble.

My pool accounts are empty. I also never use the same password twice because of stuff like this.

I am being careful now but the damage is done once

Yes. I'm sorry for your loss, but hopefully it will mean you will be extra careful in future. Never rely on other people to keep your coins secure. Never think they're safe just because they're in your wallet either. Your PC may be harder to access, but you are on a network, just like the pools.

[TimFChavez]

Yep. Someone is trying to hack accounts. For the the last few days I've been seeing
'You have X failed login attempts! Reset Counter'

sometimes when I'm even logged into a page and just refresh the site then I may see the 'You have X failed login attempts! Reset Counter' pop up on the top. I just logged into http://eac.poolerino.com which I have not used in a while and I seen 'You have 7 failed login attempts! Reset Counter' I see that on http://42.pooljunkie.nl also.

Glad I've always used a different password and pin for each account.

[sgk]

My own account was compromised twice on fast-pool. First time nearly 6000 dogecoins were manually transferred to the address "DM69fU9n...Pd2dHRka" which is (obviously) not mine. When I searched, this forum, I found another victims that were robbed by same address. A couple of days ago, same thing happened, with same address; this time some 1400 dogecoins. So all-in-all, I lost more than 7000 dogecoins in 3 transactions. I have left fast-pool now.

[sgk]

Every pool should allow to LOCK the payout addresses. This way if the hacker manages to log into a victim's account, he can't transfer the coins (unless he knows the PIN too).

[Masejoer]

Every pool should allow to LOCK the payout addresses. This way if the hacker manages to log into a victim's account, he can't transfer the coins (unless he knows the PIN too).

Even better, require PIN + e-mail confirmation for changing certain settings. Hopefully the person wouldn't have used the same password for their e-mail account.